www/plus.html - diff

Return to plus.html CVS log

Up to [local] / www

Diff for /www/plus.html between version 1.926 and 1.927

-version 1.926, 2004/06/03 23:38:49
+version 1.927, 2004/06/25 11:09:05
 Line 54
 Line 54
 Line 54
  <p>
  <h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p>
- The following list sums up (almost) all the changes made up to May 29.
+ The following list sums up (almost) all the changes made up to June 24.
  <p>
  <ul>
+ <li>Enable propolice on XFree86 modules.
+ <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>, only do TCP wrappers checks when the incoming connection is on a socket.
+ <li>Narrow down <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>'s privsep interface a bit.
+ <li>Ditch autoconf stuff in libkeynote, it's not used here.
+ <li>Set stricter modes on shared memory segments used by the X server.
+ <li>Do IPv6 fragment reassembly with the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> scrub directive. Work in progress.
+ <li>String cleaning in the X server, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fvwm&sektion=1">fvwm(1)</a> and xtrans.
+ <li>Convert libXt to ANSI C. From XFree86 HEAD.
+ <!-- ^ 20040625 -->
+ <li>Some work on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> multiprotocol support.
+ <li>Reprint the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=boot&sektion=8&arch=i386">boot(8)</a> identity string after changing the console line.
+ <li>Disable the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=boot&sektion=8&arch=i386">boot(8)</a> timeout once the user hits a key.
+ <li>Big tidyup of sys/net/rtsock.c.
+ <li>Some alignment fixups in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
+ <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=4">systrace(4)</a>, quit early if detached after an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exec&sektion=3">exec*(3)</a>, and avoid a double-free.
+ <li>Remove the 8-page size limit on the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=3">sysctl(3)</a>-returned argv array.
+ <li>Strip netiso code from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> and <!-- 20040625 --><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a>.
+ <li>Make all kernel time access via functions so that locking is possible.
+ <li>Re-<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exec&sektion=3">exec(3)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a> after <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=accept&sektion=2">accept(2)</a>. Can be turned off with the -r command line option.
+ <li>Add C++ inclusion guards into &lt;pcap.h&gt; and &lt;keynote.h&gt;.
+ <li>Add genericstable to the list of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> databases that /etc/mail/Makefile can create automatically.
+ <li>Don't <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> so often when fetching process args in libkvm. Will be needed soon.
+ <li>If one of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkill&sektion=1">pkill(1)</a>'s targets can't be killed, carry on and kill the rest instead of stopping.
+ <li>Fix SIGCHLD handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> so SIGSTOP and SIGCONT now work as expected.
+ <li>Gracefully handle line buffer overruns when reading boot.conf.
+ <li>Do <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ehci&sektion=4">ehci(4)</a> on macppc as well.
+ <li>Crank libc and libpthread majors again after <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hsearch&sektion=3">hsearch(3)</a> addition.
+ <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> to handle keys from X.509 certs embededed in keynote credentials.
+ <li>Implement <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hsearch&sektion=3">hsearch(3)</a> and friends, for XPG4.2 reasons. From NetBSD.
+ <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sendmail&sektion=8">sendmail(8)</a> to 8.13.0.
+ <!-- ^ 20040624 -->
+ <li>Correct a missing dereference and unbreak logging of IPV4_ADDR_SUBNET IDs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
+ <li>Fix the for loop that counts passed environment variables in multiplex <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
+ <li>As with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl(8)</a>, make the -w option for writes with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wsconsctl&sektion=8">wsconsctl(8)</a> optional.
+ <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> show the time between packets when prodded with -tttt.
+ <li>Some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setuid&sektion=2">setuid(2)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=setgid&sektion=2">setgid(2)</a> fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=1">systrace(1)</a>.
+ <li>Shrink the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> die-on-RTM_DELADDR window to one second.
+ <!-- ^ SLIST_FOREACH()... -->
+ <li>Remove another <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=stat&sektion=2">stat(2)</a>-then-<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=open&sektion=2">open(2)</a> from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
+ <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahd&sektion=4">ahd(4)</a> by default for i386.
+ <li>Unbreak phase 1 IPV[46]_ADDR_SUBNET IDs in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd.conf&sektion=5">isakmpd.conf(5)</a>
+ <li>New config option 'Acquire-Only' (-a on the command line) for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, to stop the daemon playing with existing flows.
+ <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cdboot&sektion=8&arch=i386">cdboot(8)</a>, a CD-specific second-stage bootstrap for i386.
+ <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, support the NOPEER community from RFC 3706.
+ <!-- ^ 20040623 -->
+ <li>Import <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atw&sektion=4">atw(4)</a> ADMtek ADM8211 wireless driver from NetBSD.
+ <li>Some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strncpy&sektion=3">strncpy(3)</a> -&gt; <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&sektion=3">strlcpy(3)</a> in sys/compat/*.
+ <li>Add a no-emulation CD boot sector, based on a FreeBSD implementation.
+ <li>Only ignore <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>-generated RTM_DELADDR messages for a five-second window after process startup, so that new instances of dhclient (started outside this window) cause the older instance to die like before.
+ <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mkhybrid&sektion=8">mkhybrid(8)</a> how to create an El Torito no-emulation boot CD (for i386), with a 2048-byte boot sector. <!-- When the commit logs are good I /do/ just quote them Tom :-) -->
+ <li>Import the generic IEEE 802.11 framework from FreeBSD and NetBSD.
+ <li>Fix probe hangs on some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahd&sektion=4">ahd(4)</a> cards.
+ <li>In the X server, fix malloc corruption when sending multiple glyphs to RenderAddGlyphs() (XFree86 bugzilla #1276, freedesktop.org bugzilla #349).
+ <li>Rewrite <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount&sektion=8">mount(8)</a>'s mount options parser, making it more robust and removing the need for duplicate code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_nfs&sektion=8">mount_nfs(8)</a> (PR#3642).
+ <li>Fix some logic errors introduced in recent string changes to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a>.
+ <li>Don't exit <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wicontrol&sektion=8">wicontrol(8)</a> if SIOCGWAVELAN fails, just print a warning and get whatever information is available without it.
+ <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>'s internal prefix lookup from a hash table to a per-address family red-black <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tree&sektion=3">tree(3)</a>.
+ <li>Don't assume in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a> that '.' and '..' are the first two entries in a directory.
+ <li>Handle division-by-zero in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a> with an error message instead of a core dump.
+ <li>Fix a segfault in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&sektion=1">xdm(1)</a> if a LISTEN keyword without hosts is found in the Xaccess file.
+ <li>When decoding fragmented IPv6 packets in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>, only try to interpret the contents of the first fragment.
+ <li>Back out source-based routing code while some problems are fixed.
+ <li>Start work on support for IPv6 routes (not just IPv6 sockets) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
+ <li>Wire <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntpd&sektion=8">ntpd(8)</a> into the build.
+ <li>Fix libXi <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=XSelectExtensionEvent&sektion=3">XSelectExtensionEvent(3)</a> on 64-bit machines (freedesktop.org bugzilla #285).
+ <li>Remove pointless 5-second <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sleep&sektion=3">sleep(3)</a>s in xtrans (freedesktop.org bugzilla #297).
+ <li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lynx&sektion=1">lynx(1)</a> to 2.8.5.rel2.
+ <li>Fix some endianness problems in X-Resource (freedesktop.org bugzilla #267).
+ <li>Add a new 'filter drop' flag to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a>, so that an interface may be notified that a packet matches a filter and should be dropped.
+ <li>Update to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lynx&sektion=1">lynx</a> 2.8.5rel1.
+ <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> drop IKE messages arriving on port 500 after the NAT-T exchange has switched to port 4500.
+ <li>Allow a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a> template peer with unknown AS to be an IBGP peer, instead of always being an EBGP peer.
+ <li>Allow the IKE parser in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a> to recognise a NAT-T payload.
+ <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s IKE parser about NAT-T keepalive packets.
+ <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, don't reallocate the pollfd array every time the size changes because there's a risk that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=realloc&sektion=3">realloc(3)</a> can fail. Reallocate only when there's a large potential saving.
+ <li>String cleaning in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a>.
+ <li>time -&gt; arc4random(9) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sppp&sektion=4">sppp(4)</a>.
+ <li>Fix bogus 'panic: cylinder group too big' message from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&sektion=8">newfs(8)</a>.
+ <li>Don't exit <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> on receipt of an RTM_DELADDR routing message, as this sometimes be generated by the dhclient itself. Instead, exit on RTM_NEWADDR iff an IP address is set that doesn't correspond to our lease. Not a perfect solution.
+ <li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ls&sektion=1">ls(1)</a> emulation: Don't show .dotfiles unless -a is specified.
+ <li>Handle interface resets gracefully in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a>.
+ <li>Do more retries on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=st&sektion=4">st(4)</a> devices to allow the tape drive to recover after a reset.
+ <li>New xetc installation fileset, for all X configuration files installed under /etc.
+ <!-- ^ 20040622 -->
+ <li>Keep separate, 1-second resolution counters for walltime and uptime, and have code that only needs 1-second resolution use those instead of the microsecond counters.
+ <li>Clean up properly on in_ifinit() failure.
+ <li>Turn <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> NAT-T support on. The crowd goes wild.
+ <li>Implement NAT-T keepalive messages in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
+ <li>Check that UDP encapsulation is enabled (<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl(8)</a> net.inet.esp.udpencap) before allowing encapsulated SAs to be created in the kernel.
+ <li>Add bounds-check <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc&sektion=1">gcc(1)</a> attributes to libkern strl*() functions, and to strncpy().
+ <li>Implement <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ls&sektion=1">ls(1)</a>-compatible sorting for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>'s ls command.
+ <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">ipsec(4)</a> on IPv6 link-local addresses.
+ <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> save the destination port if it is NATed, as one might reasonably expect it to be when using NAT-Traversal.
+ <li>Don't leak a cloned PMTU route in netinet/ip_output.c.
+ <li>arc4random(9)ise a previously time-based ID in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=atalk&sektion=4">atalk(4)</a>.
+ <li>Fix an fd leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> when multiple subsytems are present.
+ <li>Use arc4random(9) instead of the time for the ARCnet sequence ID.
+ <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&sektion=3">getaddrinfo(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getnameinfo&sektion=3">getnameinfo(3)</a> instead of old-style conversion functions in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>, but restrict resolution to AF_INET for now.
+ <li>Allow - with a warning - the old package keyword @src, in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> etc.
+ <li>Import and merge <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fontconfig&sektion=3">fontconfig</a> 2.2.2.
+ <li>Set the ESP marker on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> captured packets for NAT-T SAs.
+ <li>If the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> 'don't run scripts' (-I) option is present, don't run scripts.
+ <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> turn on kernel ESP-in-UDP encapsulation for NAT-T SAs.
+ <li>Switch to port 4500 when required for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> NAT-T exchanges.
+ <li>Use a red-black <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tree&sektion=3">tree(3)</a> instead of a hash table to track multiply-linked inodes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=du&sektion=1">du(1)</a>.
+ <!-- ^ 20040621 -->
+ <li>Time is as dumb a 'random' value for IPX and ISO CLNP as it is for IP, so use arc4random(9) instead.
+ <li>Add IPv6 support for standalone <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=popa3d&sektion=8">popa3d(8)</a> as well as when run from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=inetd&sektion=8">inetd(8)</a>.
+ <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=crypto&sektion=9">crypto(9)</a>, always store the value returned by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=splimp&sektion=9">splimp(9)</a> so we have something meaningful to give to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=splx&sektion=9">splx(9)</a>.
+ <li>Fix broken process runtimes in i386 MP.
+ <li>Use the RTF_MPATH routing flag to skip over multipath routes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, since mpath make no sense for BGP.
+ <li>For <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>'s 'ls' command, make -l show user and group names, and -n show uid and gid just like real <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ls&sektion=1">ls(1)</a>.
+ <li>New -I option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a>, which ignores changes matching the supplied regex.
+ <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnconfig&sektion=8">vnconfig(8)</a> (with the -l option) use the new VNDIOCGET ioctl to fetch <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&sektion=4">vnd(4)</a> device status.
+ <li>New VNDIOCGET ioctl for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vnd&sektion=4">vnd(4)</a> devices.
+ <li>Fix a bad format string in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s IKE parser.
+ <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, use descriptor passing to allow the creation of new listen sockets on privileged ports.
+ <li>For multiplexed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> connections, filter passed environment variables in the slave.
+ <li>Add bounds-check compiler attributes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=memcpy&sektion=3">memcpy(3)</a> etc.
+ <li>Remove support for TUBA (TCP/UDP over CLNP-Addresses Networks, as if you didn't know).
+ <li>Change <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> payload handling to deal with pre-RFC NAT-T messages.
+ <li>Don't try to carry on in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a> if the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chdir&sektion=2">chdir(2)</a> needed by the <!-- undocumented --> -C option fails.
+ <li>Start work on both RFC 3706 Dead Peer Detection, and full-on NAT-Traversal support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
+ <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> accept an unencrypted final IKE message (Aggressive Mode only) for compatibility reasons.
+ <li>New -dd switch for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> to make debugging the privsep child easier.
+ <li>Let <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=popa3d&sektion=8">popa3d(8)</a> work with IPv6 sockets, no daemon mode support yet.
+ <li>Fix a rather serious SMP merge error affecting scheduler timeouts.
+ <li>Correct some logic errors in kernel malloc_debug().
+ <li>Fix congestion-sensitive IF_INPUT_ENQUEUE() so that freed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&sektion=9">mbuf(9)</a>s no longer show up on interface input queues under certain circumstances.
+ <!-- ^ 20040620 -->
+ <li>Require the setting of new route flag RTF_MPATH (corresponding switch -mpath for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a>) to add a multipath route.
+ <li>Add defines in &lt;net/if_media.h&gt; for various telecoms carrier circuit types, i.e. E1, T1 etc.
+ <li>Save curproc in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=svnd&sektion=4">svnd(4)</a> so that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lockmgr&sektion=9">lockmgr(9)</a> doesn't get passed a null process. Stops <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=svnd&sektion=4">svnd(4)</a> blocking indefinitely (PR#3214).
+ <li>Fix a null deref in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=make&sektion=1">make(1)</a> if the .DEFAULT target has no commands.
+ <!-- ^ 20040619 -->
+ <li>Fix sending of jumbo frames on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ti&sektion=4">ti(4)</a>.
+ <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a> when using standard diffs (i.e. no context).
+ <li>Allow the user to interrupt the setup of a multiplexed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> connection (if, for example, the master gets wedged) by deferring signal setup until the connection is established.
+ <li>Merge adjacent hunks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=diff&sektion=1">diff(1)</a>, making the output more like that from GNU diff.
+ <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=execvp&sektion=3">execvp(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=execv&sektion=3">execv(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a> so -S ssh will work.
+ <li>Use dynamically allocated pollfd struct for ntpd(8), just like bgpd.
+ <!-- ^ 20040618 -->
+ <li>Fix a bunch more memory leaks in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
+ <li>Be more careful in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> when evaluating the return code from X509_verify_cert(3).
+ <li>Add much of the NTP client functionality to ntpd(8).
+ <li>Abort <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rdate&sektion=8">rdate(8)</a> on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=calloc&sektion=3">calloc(3)</a> failure, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=warnx&sektion=3">warnx(3)</a>ing and carrying on is just postponing the inevitable.
+ <li>Add an option (ControlMaster=ask) to require confimation via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-askpass&sektion=1">ssh-askpass(1)</a> before allowing a multiplexed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> connection.
+ <li>Support environment variable passing over multiplexed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> connections.
+ <li>Back out the recent IPv6 multicast change so that mandatory groups get joined, but achieve the same result by testing for a new host address before adding the multicast entries.
+ <!-- ^ 20040617 -->
+ <li>Add '-n' option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=last&sektion=1">last(1)</a> to do the same job as -<em>number</em> in a less ugly way.
+ <li>Make &lt;netinet/if_ether.h&gt; safe for inclusion in C++ code.
+ <li>Fix a bad dereference leading to a memory leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
+ <li>Fix a pasto in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>'s message decoder when printing IPv6 address/mask pairs.
+ <li>Unbreak the IN6_LOOKUP_MULTI() macro definition.
+ <!-- ^ 20040616 -->
+ <li>Add support for new crypto functions on upcoming VIA C3 processors.
+ <li>Build X on cats systems.
+ <li>Fix a null deref crash in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a>'s show command.
+ <li>Don't add multiple multicast filter entries for a single IPv6 multicast address.
+ <!-- ^ 20040615 -->
+ <li>Remove the old <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> BEGIN*, COMMIT* and ROLLBACK* ioctls.
+ <li>Use the newer <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> BEGIN and COMMIT ioctls in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">authpf(8)</a>.
+ <li>Set the relay session id properly for outgoing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&sektion=8">pppoe(8)</a> packets.
+ <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=patch&sektion=1">patch(1)</a> to detect already-applied diffs when the diff creates a file, or adds to an empty file.
+ <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=du&sektion=1">du(1)</a>, use a hash table instead of a linear list to keep track of multiply-linked files.
+ <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fmt_scaled&sektion=3">fmt_scaled(3)</a> instead of do-it-yourself in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=du&sektion=1">du(1)</a>.
+ <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a>, allow _dl_malloc() to allocate more than 4KB.
+ <li>Fix a few <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=stat&sektion=2">stat(2)</a>-then-<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=open&sektion=2">open(2)</a> races in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>.
+ <li>After going to the trouble of pulling the tcp6 options into a contiguous region with IP6_EXTHDR_GET, use the returned pointer instead of doing mtod() again.
+ <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&sektion=8">vmstat(8)</a> on older kernels.
+ <!-- ^ 20040614 -->
+ <li>Build an SMP kernel (bsd.mp) in make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=release&sektion=8">release(8)</a> for i386, and allow the user to install it.
+ <li>Merge the SMP branch onto the trunk. Let the party begin.
+ <li>Just quit rather than panic in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cy&sektion=4">cy(4)</a> if interrupts can't be established for PCI.
+ <li>Fix an off-by-one buffer size in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sed&sektion=1">sed(1)</a>.
+ <li>Implement client-side session multiplexing (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&sektion=5">ssh_config(5)</a> options ControlMaster and ControlPath) for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&sektion=1">scp(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>. The server has supported this for some time.
+ <li>Add diffie-hellman-group14-sha1 KEX method support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.
+ <!-- ^ 20040613 -->
+ <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> table add/replace commands at <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=securelevel&sektion=7">securelevel</a> 2.
+ <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&sektion=1">mg(1)</a>'s M-x gid command use the current word to try and guess which symbol to look up.
+ <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a> 'show' command output more like netstat -r.
+ <li>Support the IPV6_USE_MIN_MTU option, mainly because BIND 9 wants it.
+ <!-- ^ 20040612 -->
+ <li>Disable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4">apm(4)</a> on i386 MP machines.
+ <li>Show <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systat&sektion=1">systat(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vmstat&sektion=8">vmstat(8)</a> where to find interrupt stats on MP i386 machines.
+ <li>Only print 'status/cpu#' in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a> if there's  more than one CPU.
+ <li>Fix a dereference-after-free (actually after <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pool_put&sektion=9">pool_put(9)</a>) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tables.
+ <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pax&sektion=1">pax(1)</a>, fix backreference substitution in -s mode and unbreak bad regex detection.
+ <li>Add a cpuid field to struct kproc2, and teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ps&sektion=1">ps(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top(1)</a> how to make use of it.
+ <!-- ^ 20040611 -->
+ <li>Only install the Intel F00F bug workaround once on MP machines, avoiding a panic.
+ <li>Zero the restart counter before use, to fix a problem with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uhub&sektion=4">uhub(4)</a> port restarts giving up before starting. From FreeBSD.
+ <li>Fix a sizeof(pointer) bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a>.
+ <li>Don't leak a softc when detaching a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> cloned interface.
+ <li><font color="#e00000"><strong>SECURITY FIX: Multiple vulnerabilities have been found in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> / mod_ssl.</strong></font> This is the second of two sets of fixes.<br>
+ <ul>
+   <li><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0488">CAN-2004-0488</a>: Stack-based buffer overflow ... in mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow attackers to execute arbitrary code via a client certificate with a long subject DN.
+   <li><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0492">CAN-2004-0492</a>: [mod_proxy] Reject responses from a remote server if sent an invalid (negative) Content-Length: header.
+ </ul>
+     <a href="errata.html#httpd">A source code patch is available</a>.<br>
+     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
+ <li><font color="#e00000"><strong>SECURITY FIX: As <a href="http://seclists.org/lists/fulldisclosure/2004/Jun/0191.html">disclosed</a> by Thomas Walpuski, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> is still vulnerable to unauthorized SA deletion.</strong></font> An attacker can delete IPsec tunnels at will.<br>
+     <a href="errata.html#isakmpd">A source code patch is available</a>.<br>
+     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
+ <li>Add src/lib/libintl and libc i18n directories to the repository.
+ <!-- ^ 20040610 -->
+ <li>First merge of SMP code into the trunk, mainly structures to allow gradual introduction of the new APIs.
+ <li>Fix IPv4 name-to-address translation, so invalid octet values won't be accepted and CIDR address/mask pairs finally work the way one expects.
+ <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>'s privsep <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=localtime&sektion=3">localtime(3)</a> replacement, deal better with timezones with granularity of less than one hour.
+ <li><font color="#e00000"><strong>SECURITY FIX: Multiple remote vulnerabilities have been found in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a> server</strong></font> that will allow an attacker to crash the server or possibly execute arbitrary code with the same privileges as the CVS server program.<br>
+     <a href="errata.html#cvs3">A source code patch is available</a>.
+ <li>On i386 (ppro and above), use the calibrated value for the CPU speed over the value returned by the CPU itself, fixing PR#3814.
+ <li>Use a dynamically allocated array of pollfds in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>.
+ <li>Try to prevent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> deleting SAs on receipt of malicious IKE messages.
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rdate&sektion=8">rdate(8)</a> improvements:
+ <ul>
+   <li>RFC 2030 compliance for NTP mode.
+   <li>Much more robust error handling, with better messages.
+   <li>Better detection of stale or spoofed NTP responses.
+   <li>Support for multiple addresses if returned by the DNS, trying each listed server until one works.
+ </ul>
+ <!-- ^ 20040609 -->
+ <li>Remove NMBCLUSTERS settings from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a>.
+ <li>Factor out TCP md5sig code into tcp_subr.c:tcp_signature().
+ <li>Fix buffer usage in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umass&sektion=4">umass(4)</a> CBI transfers (NetBSD PR#25676).
+ <!-- ^ 20040608 -->
+ <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&sektion=1">ksh(1)</a> to actually work.
+ <li>Break the dependency of libc on &lt;pthread.h&gt;. Bump the major version of libc and libpthread.
+ <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdump&sektion=1">kdump(1)</a> about <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gpio&sektion=4">gpio(4)</a> ioctls.
+ <li>Allow an authtype (-a option) in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skeyinit&sektion=1">skeyinit(1)</a> even when secure mode (-s) in in effect.
+ <li>Add an alternative algorithm to make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> table deletions faster for a small number of deleted items.
+ <li><font color="#e00000"><strong>SECURITY FIX: Multiple vulnerabilities have been found in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> / mod_ssl.</strong></font> This is the first of two sets of fixes.<br>
+ <ul>
+   <li><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0020">CAN-2003-0020</a>: Apache does not filter terminal escape sequences from its error logs.
+   <li><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0987">CAN-2003-0987</a>: Apache mod_digest does not properly verify the nonce of a client response by using an AuthNonce secret.
+ </ul>
+     <a href="errata.html#httpd">A source code patch is available</a>.<br>
+     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
+ <!-- ^ 20040607 -->
+ <li>Out-of-line <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spl&sektion=9">spl(9)</a> functions in SMP on i386, mirroring the UP change to fix VFS corruption.
+ <li>Add SMP-related devices for i386 on the SMP branch.
+ <li>Many fixups on the SMP branch for non-MP kernels.
+ <li>Rework <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>'s listen socket handling to better support multiple listen addresses.
+ <li>New -src and -srcmask options for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a> supporting the new source-address routing functinoality.
+ <li>New -S flag for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=netstat&sektion=1">netstat(1)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8">route(8)</a>, to show the new source selector part of a route entry.
+ <li>Extend the routing table to allow routing based on source as well as destination. IPv4 only for now, more to come.
+ <li>Set the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=skey&sektion=1">skey(1)</a> first sequence number to 100 as promised by the manpage.
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spl&sektion=9">spl(9)</a> and alignment fixes in portalfs.
+ <!-- ^ 20040606 -->
+ <li>Much merging and fixup as SMP is readied for prime-time.
+ <li>Resurrect the '<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fork1&sektion=9">fork1(9)</a>-can-take-null-retval' change, this time leaving the setup of struct proc setup well alone.
+ <li>Fix a bug with X and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wsmouse&sektion=4">wsmouse(4)</a> where an event of unknown type could cause a whole batch of other events to be discarded.
+ <li>Set the length field in the TCP packet header earlier in tcp_output().
+ <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=re&sektion=4">re(4)</a> driver supporting RealTek Gigabit Ethernet devices.
+ <!-- ^ 20040605 -->
+ <li>Clean up multicast addresses when unconfiguring <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> interfaces.
+ <li>Clarify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&sektion=8">user(8)</a> docs and error messages (PR#3792).
+ <li>Add startup code for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hotplugd&sektion=8&arch=i386">hotplugd(8)</a> to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc&sektion=8">rc(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.conf&sektion=8">rc.conf(8)</a>.
+ <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=usbhid&sektion=3">usbhid(3)</a> API <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hid_start&sektion=3">hid_start(3)</a>, a non-noisy version of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hid_init&sektion=3">hid_init(3)</a>.
+ <!-- ^ 20040604 -->
+ <li>Don't send mail at all from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a> if MAILTO is set but empty.
+ <li>Cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&sektion=1">at(1)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a>:
+ <ul>
+   <li>Check argc before using argv[0] in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&sektion=1">at(1)</a>.
+   <li>Print the right filename for a job in the email.
+   <li>Reset the sockaddr length value every time before <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=accept&sektion=2">accept(2)</a>.
+ </ul>
+ <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gpioctl&sektion=8&arch=i386">gpioctl(8)</a> program to go with new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gpio&sektion=4">gpio(4)</a>.
+ <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> fall back to user nobody if user _dhcp doesn't exist. Helps with upgrades.
+ <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&sektion=3">getopt(3)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt_long&sektion=3">getopt_long(3)</a>, don't allow an optional argument if it begins with a '-'.
+ <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cron&sektion=8">cron(8)</a> to accept crontabs with more strict permissions than is the default.
+ <li>New General Purpose I/O device <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gpio&sektion=4">gpio(4)</a>. Only enabled on i386 for now.
+ <li>New '!!&lt;prog&gt;' syntax for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>, used to force messages from the named program to only go to certain files regardless of the rest of syslog.conf.
+ <li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=file&sektion=">file()</a>'s magic to that from file version 4.09, with a few local changes and additions.
+ <!-- ^ 20040603 -->
+ <li>Use the old _nointr <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pool&sektion=9">pool(9)</a> allocator for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> tables.
+ <li>Rearrange the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pool&sektion=9">pool(9)</a> allocator code so the old allocation method can be used agai.
+ <li>Use the quirks mechanism to fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wdc&sektion=4">wdc(4)</a> hangs on Geode SC1100 devices (PR#3729).
+ <li>Implement SCSI-style quirks for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wdc&sektion=4">wdc(4)</a>.
+ <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=errx&sektion=3">errx(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=err&sektion=3">err(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=find&sektion=1">find(1)</a> when errno isn't set by the error.
+ <li>When calling <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=err&sektion=3">err(3)</a> after a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a> failure, don't specify a message.
+ <li>Cleanup in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rm&sektion=1">rm(1)</a>.
+ <li>Support multicast on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kue&sektion=4">kue(4)</a>.
+ <li>Add IPv6 support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uucpd&sektion=8">uucpd(8)</a>.
+ <li>Trivial changes (sockaddr_in -&gt; sockaddr_storage) to add IPv6 support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc.rquotad&sektion=8">rpc.rquotad(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc.rstatd&sektion=8">rpc.rstatd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc.rusersd&sektion=8">rpc.rusersd(8)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc.rwalld&sektion=8">rpc.rwalld(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc.sprayd&sektion=8">rpc.sprayd(8)</a>.
+ <!-- ^ 20040602 -->
+ <li>Mark nullfs memory as M_MISCFSMNT instead of M_UFSMNT.
+ <li>Swing hppa to gcc3, and enable shared library support.
+ <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xterm&sektion=1">xterm(1)</a> jump-scrolling on big-endian 64-bit systems.
+ <li>Remove a somewhat useless current-process privilege check in the IPv6 input path. Based on KAME.
+ <li>Compatibility fixes for some <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sk&sektion=4">sk(4)</a> devices (PR#3061). Workaround from FreeBSD.
+ <!-- ^ 20040601 -->
+ <li>Initialise the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> interface structure before use.
+ <li>Don't advertise an absurd TCP receive window on 64-bit architectures. From NetBSD.
+ <li>Some Single UNIX Specification updates in &lt;limits.h&gt;.
+ <li>Better error handling for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rm&sektion=1">rm(1)</a>'s -P option. From FreeBSD.
+ <li>First cut at a home-grown NTP daemon. Not built by default yet.
+ <li>Remove ugly string code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a>, used when no unit number was given to BIOCSETIF.
+ <li>Fix a long-standing KAME pasto that was breaking SIOC[DG]LIFADDR.
+ <li>Remove a bunch of redundant errno declarations.
+ <li>Use generic crc32 code instead of local efforts in many Ethernet devices.
+ <!-- ^ 20040531 -->
+ <li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xl&sektion=4">xl(4)</a> with FreeBSD, bringing in a lot of bug fixes and improvements.
+ <li>Check the NTP server clock status returned to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rdate&sektion=8">rdate(8)</a> and don't use the response if the server thinks its clock is unsynchronised.
+ <li>In uvm_map_clean() (called by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=msync&sektion=2">msync(2)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=madvise&sektion=2">madvise(2)</a>), only free writable pages, and don't free copy-on-write pages because the permissions aren't known.<br>
+     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
+ <li>Only call <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getprotobynumber&sektion=3">getprotobynumber(3)</a> from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ppp&sektion=8">ppp(8)</a> when the logging level is high enough to need the result. From FreeBSD.
+ <li>Some Emacs compatibility tweaks to binutils. Use the classic executable start addresses if <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld&sektion=1">ld(1)</a> option -Z (disable W^X) is active.
+ <li>New privsep user and group _ntp.
+ <li>New monitoring daemon <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hotplugd&sektion=8&arch=i386">hotplugd(8)</a> to go with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hotplug&sektion=4">hotplug(4)</a>.
+ <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hotplug&sektion=4">hotplug(4)</a> device to pass device attach and detach events up to userland. Available for alpha, amd64, i386, macppc and sparc64, only enabled on i386 for now.
+ <li>Use generic CRC code, remove bogus LLADDR use and handle multicast ranges better in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nge&sektion=4">nge(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sf&sektion=4">sf(4)</a>.
  <!-- ^ 20040530 -->
  <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bge&sektion=4">bge(4)</a> multicast reception.
  <li>Add a description field for network interfaces, accessible via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> command 'description' and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ioctl&sektion=2">ioctl(2)</a>s SIOC[GS]IFDESCR.
-Line 80
+Line 393
 Line 80
 Line 393
  <li>Make accounting optional, with the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&sektion=8">config(8)</a> option (wait for it) ACCOUNTING.
  <li>Allow login names longer than eight characters in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uucpd&sektion=8">uucpd(8)</a>.
  <li>Fix a memory leak in a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> error path.
- <li>When shutting the system down, finalise accounting before the VFS to avoid <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=panic&sektion=9">panic(9)</a>s.
+ <li>When shutting the system down, finalise accounting before the VFS to avoid panics.
  <li>Fix TCP corruption on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rl&sektion=4">rl(4)</a> cards.
  <li>Much better rulefile parsing for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=brconfig&sektion=8">brconfig(8)</a>.
  <li>Pool efficiency improvements:
-Line 99
+Line 412
 Line 99
 Line 412
  <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=_exit&sektion=2">_exit(2)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=exit&sektion=3">exit(3)</a> in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a> child process.
  <!-- ^ 20040526 -->
  <li>Include the hostname in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a> memory-buffered entries.
- <li>Since the per-arch _dl_bcopy() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> is in all cases a simple for loop and painstakingly optimised assembler, just use a single machine-independent version.
+ <li>Since the per-arch _dl_bcopy() in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> is in all cases a simple for loop and not painstakingly optimised assembler, just use a single machine-independent version.
  <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> _dl_find_symbol() to return a pointer to the container object.
  <li>Handle interface removals gracefully in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8">dhcpd(8)</a>, now that <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a> wakes it up on interface detach.
  <li>Wake up any <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll(2)</a>ing process when a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&sektion=4">bpf(4)</a> descriptor is closed.
-Line 110
+Line 423
 Line 110
 Line 423
  <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bktr&sektion=4">bktr(4)</a> fixes from NetBSD and FreeBSD.
  <li>Move the addition of atexit destructors right to the end of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> setup (after the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdb&sektion=1">gdb(1)</a> helper code) so they can be debugged.
  <li>If <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a> is running under <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ldd&sektion=1">ldd(1)</a>, exit earlier before a whole bunch of unnecessary setup gets done.
- <li>Check ifp is valid before using it in carp_setroute(), avoiding a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=panic&sektion=9">panic(9)</a>.
+ <li>Check ifp is valid before using it in carp_setroute(), avoiding a panic.
  <li>Helpfully, use the right function names in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a> error messages.
  <li>Fix multicast problems with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sk&sektion=4">sk(4)</a>.
  <li>Don't leak a socket in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndp&sektion=8">ndp(8)</a>.
  <li>Back out the recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fork1&sektion=9">fork1(9)</a> change due to compatibility problems.
  <!-- ^ 20040524 -->
  <li>New MaxAuthTries option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5">sshd_config(5)</a>.
- <li>Allow the retval parameter to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fork1&sektion=9">fork1(9)</a> to be NULL (as the manpage says) without causing a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=panic&sektion=9">panic(9)</a>.
+ <li>Allow the retval parameter to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fork1&sektion=9">fork1(9)</a> to be NULL (as the manpage says) without causing a panic.
  <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strtonum&sektion=3">strtonum(3)</a>ify <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>.
  <li>Add <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gscsio&sektion=4">gscsio(4)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lmtemp&sektion=4">lmtemp(4)</a> I2C drivers.
  <li>Add I2C framework (<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iic&sektion=4">iic(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iic&sektion=9">iic(9)</a>) based on that in NetBSD and enable on i386.
-Line 154
+Line 467
 Line 154
 Line 467
  <li>Enable the fancy new i386 pagezero code by not resetting it to its old value after setting it up.
  <li>Allow anchors within anchors in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a>. More work to come.
  <li>Don't recursively call nd6_output() when route allocation fails, just return a host unreachable error.
- <li><font color="#e00000"><strong>SECURITY FIX: A heap overflow in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a> server has been discovered that can be exploted by clients sending malformed requests.</strong></font> These clients can then run arbitrary code with the same privileges as the CVS server program.<br>
+ <li><font color="#e00000"><strong>SECURITY FIX: A heap overflow in the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1">cvs(1)</a> server has been discovered that can be exploited by clients sending malformed requests.</strong></font> These clients can then run arbitrary code with the same privileges as the CVS server program.<br>
      <a href="errata.html#cvs2">A source code patch is available</a>.<br>
      <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
  <li>Allow symbolic service- and protocol names in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>, so e.g. "Protocol=tcp" now works.
-Line 185
+Line 498
 Line 185
 Line 498
  <li>Add basic COMMUNITIES attribute support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>'s filter language.
  <li>Update libiberty's floatformat.[ch] to those from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gdb&sektion=1">gdb(1)</a> 6.1.
  <!-- ^ 20040517 -->
- <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rand&sektion=3">rand(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> mod_rewrite and mod_ssl, cleaning up surrounding code in the latter on the way.
+ <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rand&sektion=3">rand(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=httpd&sektion=8">httpd(8)</a> mod_rewrite and mod_ssl, cleaning up surrounding code in the latter on the way.<br>
+     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a>
  <li>Remove the now-unused <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8">dhclient(8)</a> pidfile stuff from /etc/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc&sektion=8">rc(8)</a>.
  <li>Add a separate link type, DLT_PPP_ETHER, for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pppoe&sektion=8">pppoe(8)</a> frames. From NetBSD.
  <li>Don't skip the graceful shutdown of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> just because the system is being powered down.